A flaw in Zimbra email suite allows stealing login credentials of the users

A high-severity vulnerability in the Zimbra email suite could be exploited by an unauthenticated attacker to steal cleartext passwords.

MalasLocker Ransomware: Exploiting Zimbra Servers for Charity and its Global Impact - Black Kite

Spearphishing Campaign Targets Zimbra Webmail Portals of Government Organizations

Chained Zimbra flaws gave attackers unrestricted access to mail servers

A Twist in the Code: OpenMeetings Vulnerabilities through Unexpected Application State

A Zimbra email flaw gets abused by hackers to steal corporate data

Manually patch this Zimbra bug that's under attack • The Register

Zimbra Archives - Security Affairs

CVE-2023-37580 Detection: Four Hacking Groups Exploit a Zimbra Zero-Day Vulnerability Targeting State Bodies - SOC Prime

Hackers Exploiting Zimbra 0-day to Attack

Business email platform Zimbra patches memcached injection flaw that imperils user credentials